The Internet of Things (IoT)

Active learning works because the Internet of Things is a tangible concept hiding in plain sight. For 9th graders who use smart devices daily but rarely consider how they function, hands-on activities make the abstract concrete. When students design, analyze, and debate real-world IoT scenarios, they move from passive consumers to informed users.

• 9th Grade
• Computer Science
• 4 activities
• 25 min–45 min

Learning Objectives

1. Identify at least five distinct types of IoT devices and explain their primary function.
2. Analyze the data flow within a simple IoT system, from sensor to cloud and back.
3. Evaluate the privacy risks associated with common IoT devices like smart speakers and security cameras.
4. Compare the security vulnerabilities of traditional computing devices versus IoT devices.
5. Design a conceptual IoT system for a specific application, considering potential ethical implications.

Role Play

⏱ 45 min·Small Groups

Role Play: IoT Device Design Council

Groups of four take assigned roles (engineer, consumer advocate, security researcher, business owner) and collaborate to design an IoT product for a school campus. Each stakeholder argues for their priorities during a simulated pitch session, and the class evaluates which tradeoffs were resolved well.

Prepare & details

Explain the fundamental principles and applications of the Internet of Things.

Facilitation Tip: During Role Play: IoT Device Design Council, provide each group with a role card and a sample device (e.g., smart doorbell) to ground their discussion in real-world constraints.

Setup: Open space or rearranged desks for scenario staging

Materials: Character cards with backstory and goals, Scenario briefing sheet

• Apply
• Analyze
• Evaluate
• Social Awareness
• Self-Awareness

Think-Pair-Share

⏱ 25 min·Pairs

Think-Pair-Share: Device Risk Assessment

Students receive a list of 10 IoT devices (baby monitor, smart lock, insulin pump, connected streetlight) and individually rate each for privacy risk on a 1-5 scale with a one-sentence justification. Pairs compare ratings and resolve disagreements before sharing with the class.

Prepare & details

Analyze the privacy and security implications of widespread IoT adoption.

Facilitation Tip: In Think-Pair-Share: Device Risk Assessment, give students a short time limit (2–3 minutes) to list risks independently before pairing to refine their ideas.

Setup: Standard classroom seating; students turn to a neighbor

Materials: Discussion prompt (projected or printed), Optional: recording sheet for pairs

• Understand
• Apply
• Analyze
• Self-Awareness
• Relationship Skills

Gallery Walk

⏱ 30 min·Small Groups

Gallery Walk: IoT in Industries

Post six industry case studies (healthcare, agriculture, manufacturing, transportation, retail, smart cities) around the room. Students annotate what data is collected, who benefits, and what could go wrong if the system were compromised or misused.

Prepare & details

Predict how IoT will transform various industries in the future.

Facilitation Tip: For Gallery Walk: IoT in Industries, place printed case studies at eye level and mark a 3-minute rotation so students absorb details without rushing.

Setup: Wall space or tables arranged around room perimeter

Materials: Large paper/poster boards, Markers, Sticky notes for feedback

• Understand
• Apply
• Analyze
• Create
• Relationship Skills
• Social Awareness

Case Study Analysis

⏱ 35 min·Pairs

Case Study Analysis: The Mirai Botnet

Students read a structured summary of the 2016 Mirai attack, where compromised IoT devices took down major websites. Working in pairs, they identify the security failures that made the attack possible and propose three design changes that could have prevented or limited the damage.

Prepare & details

Explain the fundamental principles and applications of the Internet of Things.

Facilitation Tip: In Case Study Analysis: The Mirai Botnet, assign roles (e.g., journalist, security expert) to ensure every student participates in the discussion.

Setup: Groups at tables with case materials

Materials: Case study packet (3-5 pages), Analysis framework worksheet, Presentation template

• Analyze
• Evaluate
• Create
• Decision-Making
• Self-Management

Teaching This Topic

Teachers approach this topic by grounding abstract concepts in devices students recognize, then gradually revealing hidden data flows and risks. Avoid starting with definitions; instead, begin with devices students use daily. Research shows that when students analyze real cases, they retain network security concepts better than through lectures alone. Encourage debate to surface misconceptions early so you can address them directly.

What to Expect

Successful learning looks like students explaining how IoT devices collect and use data, identifying security risks in specific devices, and discussing ethical implications with evidence. They should connect their own experiences to larger systems and demonstrate an understanding of shared responsibility for privacy and safety.

Watch Out for These Misconceptions

Common Misconception

During Role Play: IoT Device Design Council, watch for students calling devices 'smarter versions' of appliances. Redirect by asking them to trace one piece of data the device collects and where it goes.

What to Teach Instead

Use the Council’s product briefs to push students to name the sensor (e.g., motion detector) and the data flow (e.g., to a cloud server). Ask, 'What happens to that motion data after it leaves the device?' to make the network visible.

Common Misconception

During Think-Pair-Share: Device Risk Assessment, watch for students assuming cameras and microphones are the only sensors collecting data. Redirect by having them examine the device’s full sensor list provided in the activity.

What to Teach Instead

During the Pair phase, give students a checklist of common sensors (accelerometer, GPS, ambient light) and ask them to mark which ones are present in their assigned device. This makes invisible sensors visible.

Common Misconception

During Case Study Analysis: The Mirai Botnet, watch for students blaming manufacturers alone for security failures. Redirect by asking them to identify user actions (like not changing default passwords) that contributed to the attack.

What to Teach Instead

Have groups list both manufacturer responsibilities (e.g., secure coding) and user responsibilities (e.g., firmware updates) on a T-chart during the analysis. Discuss how both sides share accountability.

Assessment Ideas

Exit Ticket

After the Gallery Walk: IoT in Industries, have students complete an exit ticket listing one IoT device they observed, its primary sensor, and one privacy concern they identified during the walk.

Discussion Prompt

During Case Study Analysis: The Mirai Botnet, use the discussion prompt about the security camera to assess ethical reasoning. Listen for mentions of consent, data ownership, and legal consequences.

Quick Check

After Think-Pair-Share: Device Risk Assessment, collect the risk assessment sheets and review them to check if students correctly identified at least two security risks for their assigned device.

Extensions & Scaffolding

• Challenge students to design a privacy label for an IoT device, matching the format of nutrition labels to communicate data collection clearly.
• Scaffolding: Provide sentence starters for ethical discussions, such as 'One risk of this device is...' or 'A user might not realize...'
• Deeper exploration: Have students research how IoT data is used in targeted advertising and present findings with examples of data trails.

Key Vocabulary

Sensor	A device that detects and responds to some type of input from the physical environment, such as light, heat, or motion, and converts it into an electrical signal.
Actuator	A component of an IoT system that receives a command and performs a physical action, such as turning on a light or adjusting a thermostat.
Gateway	A device that connects IoT devices to the internet or another network, often translating data formats or protocols.
Embedded System	A specialized computer system with a dedicated function within a larger mechanical or electrical system, often found in IoT devices.
Cloud Computing	The delivery of computing services, including servers, storage, databases, networking, software, analytics, and intelligence, over the Internet ('the cloud') to offer faster innovation, flexible resources, and economies of scale.